[openstack-dev] Glance Image signing and verification

Benjamin, Bruce P. Bruce.Benjamin at jhuapl.edu
Tue Feb 16 16:23:54 UTC 2016


All,
Here are operations guide instructions currently in review to add signed images and configure Nova to automatically check the signature prior to conditionally booting an image. https://review.openstack.org/#/c/245886/. These instructions are more up to date than the ones on the etherpad. Please take a look.  Thanks.

Bruce

> On 2/11/16 13:51:08 UTC 2016 Nikhil Komawar wrote:
> Hi Pankaj,
>
> Here's a example instruction set for that feature.
>
> https://etherpad.openstack.org/p/liberty-glance-image-signing-instructions
>
> Hope it helps.
>
>>On 2/11/16 8:45 AM, Pankaj Mishra wrote:
>>
>> Hi,
>>
>>
>>
>> I am new in OpenStack and I want to create image through glance CLI
>> and I am referring blueprint
>> https://blueprints.launchpad.net/glance/+spec/image-signing-and-verification-support
>>  and I am using below mentioned command to create the image. So what
>> is the step for  Glance Image signing and verification by using glance
>> cli.
>>
>>
>>
>> glance --os-image-api-version 2 image-create [--architecture
>> <ARCHITECTURE>>]
>> [--protected [True|False]] [--name <NAME>]
>> [--instance-uuid <INSTANCE_UUID>]
>> [--min-disk <MIN_DISK>] [--visibility <VISIBILITY>]
>> [--kernel-id <KERNEL_ID>]
>> [--tags <TAGS> [<TAGS> ...]]
>> [--os-version <OS_VERSION>]
>> [--disk-format <DISK_FORMAT>] [--self <SELF>]
>> [--os-distro <OS_DISTRO>] [--id <ID>]
>> [--owner <OWNER>] [--ramdisk-id <RAMDISK_ID>]
>> [--min-ram <MIN_RAM>]
>> [--container-format <CONTAINER_FORMAT>]
>> [--property <key=value>] [--file <FILE>]
>> [--progress]
>>
>>
>>
>> Please any one suggest me, how to execute this command for image
>> signing and verification.
>>
>>
>>
>> Thanks & Regards,
>>
>> Pankaj
>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20160216/a99c15b7/attachment.html>


More information about the OpenStack-dev mailing list